KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #typescript #developer-tools #claude-code #ai-agent #codex #deepseek-harness #ai-agents #cli #react #mcp

VMPStatic

★ 93 Open GitHub ↗

A static VMProtect unpacker for PE files, supports VMProtect 1.x–3.x and rebuilding unpacked PE images

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# VMPStatic
A static VMProtect unpacker for PE files, compatible with VMProtect 1.x–3.x and capable of reconstructing decompressed PE images

Unlike dynamic unpacker, this tool works without executing the target file. The goal is to recover a usable PE image that can be further analyzed in tools such as IDA, Ghidra, x64dbg, or similar software.

## Features

- Static VMProtect unpacking  
- Compatible with VMProtect 1.x, 2.x, and 3.x patterns
- Analysis of PE headers and sections  
- Detection of VMProtect sections and stubs  
- Reconstruction of packed images  
- Recovers data hidden by packing, such as strings, resources, and embedded PE files

## Limitations

- Does not include an import address table fixer  
- Does not include automatic OEP recovery for all samples  
- Does not include de-virtualization  
- Some protected samples may still require manual repair after unpacking

## Usage

```bash
vmpstatic.exe packed.exe unpacked.exe

VMPStatic

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README